Skip to content
OpenAdvisories
Unscored CVE-2017-2278 EUVD-2017-11461GHSA-j396-cqxp-9qrm

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 ce…

Published Aug 2, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: IID Product: RBB SPEED TEST App for Android Product: RBB SPEED TEST App for iOS Platform: Android Platform: iOS

Description

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

VendorProductAffectedFixed
IID RBB SPEED TEST App for Android version 2.0.3 and earlier —
IID RBB SPEED TEST App for iOS version 2.1.0 and earlier —

References